MAL-2025-153775 Malicious code in bintang-tea27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dc749976f3bfc7c44c0a2256cd65bd8f8cbcd07832cc996fa9839ed2a969dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoin-agodofgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20fe8b67cec09f2d646074d11a15e3c1ed6ca75582b8ebe1969d3e1cfe751c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150836 Malicious code in @miptaa02/miqwasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbc12d1f0743f273d33d0bd9ee7701e4eea8e0fb1deea5dd7c64e194b98611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165869 Malicious code in shilang-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c7c90a25f795ea4a909eff6f95d06a2d729c3a0b7b5972db16faceb00d71d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164688 Malicious code in rino-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a3462de3f9204eeb5873f4d960e71dc6c1bef331be4215b82af575483a7807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157168 Malicious code in jurss-gasasd-14s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e5d97d87cd09c7931da47f1e11e7708b9d6e341634d20af40e75966e1c1b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foa-jafuliafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b03585d9d2998787c762cf6b794dc0dfb3fdca829bf5f8d2f08380f680231dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otigan-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811ae27958e39b3590b7df1dede97efb9b7dba60603e4dd4144ff7bdaf5a84c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156342 Malicious code in inagi-vuma-nunbag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2b12f5575827bcae11e7507a62d68392eb366f2c934261e986f19e5fd5cee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157214 Malicious code in jurss-zas-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2ad4b4532e8209c5dd66b3e61fe262662f87c83e11cc1df266553c001ed35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc52b60fd7470e4305abde2b6292d733b06abc7dfc40e3b825adf04f936f9edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157932 Malicious code in lala-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6825d0d062114af2abf7c5c5c333d9a329b06d67585c182612084204a01f8b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wbo1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292b2f368c52ff242900419076ac2f7225762e522eebefbdd8ac537efaed1a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhyu-taa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac68187783019a54109e43749a0cfacd0a562b10e1601222642ff802d04f928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-assin-muanst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd47c23ba4b6b85ec3c435073c2f8e736f653971a353887229b69d1b5e6f56c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8099bcd5e1e62fcc5886782687a6f40588f4160514f17b190a38b98821c8da6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169508 Malicious code in uaragifa-afat-usar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ab10cf2f844fec293daf9c9d7a522f592b1b425e9f82ce698e5e3968c6764c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167796 Malicious code in teagood-sukuna42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46de616e1237d921e37c977dbbd574c7cf65b8a018731e758f3348ee633920e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151355 Malicious code in abina-amoavugoi-anuhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf7b1f43cdb9577708b1c79181307e87c1a514e42756d1224a44d3508eb6604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152343 Malicious code in alita-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340d7f981f1e690c72524cac5283735f5a5cf337b3e9185667d0a8ce61c0071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...